Docket No.: 58430/R178 
Amdt date September 15, 2006 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 
1-95 (Cancelled) 

96. (New) A method for anonymously indexing an electronic record system, the 
method comprising: 

storing an asymmetric cryptographic private key under the control of a portable storage 
device of a registered user; 

storing an anonymous public key certificate, the anonymous public key certificate being 
associated with an asymmetric cryptographic public key matching the asymmetric cryptographic 
private key; 

providing the portable storage device with information for associating the registered user 
with the portable storage device; and 

indexing within an electronic record system personal information of the registered user, 
whereby association of the information with the registered user is anonymously verifiable by use 
of the anonymous public key certificate. 

97. (New) The method of claim 96 wherein the portable storage device is provided 
with at least one of: human readable information for associating the registered user with the 
portable storage device; and machine readable information for associating the registered user 
with the portable storage device upon presentation of the portable storage device. 

98. (New) The method of claim 96 wherein the portable storage device is at least one 
of: a smartcard; and an electronic passport. 

99. (New) The method of claim 96 wherein the indexing comprises associating with 
each item of personal information of the registered user an electronic record pointer, and wherein 
the anonymous public key certificate contains the electronic record pointer. 
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100. (New) The method of claim 96, wherein storing of the asymmetric cryptographic 
private key under the control of the portable storage device comprises at least one of: 

storing the asymmetric cryptographic private key in the portable storage device; 
storing an access code in the portable storage device allowing access to the asymmetric 
cryptographic private key; and 

copying the asymmetric cryptographic private key into the possession of an authorised 

user. 

101. (New) The method according to claim 99 wherein digital signature codes are 
created for given data items within the electronic record system in order to explicitly link each 
digitally signed data item to the value of an electronic record pointer associated with the digital 
signature codes. 

102. (New) The method according to claim 96 wherein digital signature codes are 
created for given data items in the electronic record system using an asymmetric cryptographic 
private key issued to the registered person, where each digital signature code is interpreted as 
explicitly recording the consent of the registered person to the creation of each respective 
digitally signed data item. 

1 03. (New) An anonymously indexed electronic record system comprising: 

a portable storage device for a registered user, an asymmetric cryptographic private key 
being under the control of the portable storage device, the portable storage device being provided 
with information for associating the registered user with the portable storage device; 

a stored anonymous public key certificate associated with an asymmetric cryptographic 
public key matching the asymmetric cryptographic private key, 

an electronic storage indexing personal information of the registered user, whereby 
association of the information with the registered user is anonymously verifiable by use of the 
anonymous public key certificate. 
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104. (New) The system of claim 103 wherein the portable storage device is provided 
with at least one of: 

human readable information for associating the registered user with the portable storage 
device; and 

machine readable information for associating the registered user with the portable storage 
device upon presentation of the portable storage device. 

105. (New) The system of claim 103 wherein the portable storage device is at least 
one of: a smartcard; and an electronic passport. 

106. (New) The system of claim 103 wherein the electronic storage indexes the 
personal information by having associated with each item of personal information of the 
registered user an electronic record pointer, and wherein the anonymous public key certificate 
contains the electronic record pointer. 

107. (New) The system of claim 106 wherein digital signature codes are created for 
given data items within the electronic record system in order to explicitly link each digitally 
signed data item to the value of an electronic record pointer associated with the digital signature 
codes. 

108. (New) The system of claim 103 wherein digital signature codes are created for 
given data items in the electronic record system using an asymmetric cryptographic private key 
issued to the registered person, where each digital signature code is interpreted as explicitly 
recording the consent of the registered person to the creation of each respective digitally signed 
data item. 

109. (New) The system of claim 103 wherein the anonymous public key certificate 
contains a personal data component. 

1 10. (New) The system of claim 109 wherein the personal data component comprises 
biometric data of the registered user. 
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111. (New) The system of claim 103, wherein the asymmetric cryptographic private 
key is stored in the portable storage device. 

1 12. (New) The system of claim 103, wherein an access code is stored in the portable 
storage device allowing access to the asymmetric cryptographic private key. 

113. (New) The system of claim 103, wherein the asymmetric cryptographic private 
key can be copied with the registered user's authorisation into the possession of an authorised 
user. 

114. (New) The system of claim 113 wherein the authorised user is a health care 
professional authorised by the registered user to enter an update to the registered user's indexed 
personal information. 

115. (New) A portable storage device for a registered user of an anonymously indexed 
electronic record system, the portable storage device being provided with information for 
associating the registered user with the portable storage device, wherein an asymmetric 
cryptographic private key is under the control of the portable storage device, wherein an 
anonymous public key certificate is associated with an asymmetric cryptographic public key 
matching the asymmetric cryptographic private key, and wherein association of anonymously 
indexed personal information with the user is anonymously verifiable by use of the anonymous 
public key certificate. 
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